The part before the blank lines just sets up some example data as you showed - the part after the blank lines extracts the fields and counts the occurrences. | makeresults | eval _raw="GradeReport.bat \"Best grade\" \"07/20/2021\" \"07/27/2021\" 135629 CSV GradeReport.bat \"Average grade\" \"\" \"07/27/2021\" \"\" CSV GradeReport.bat \"Best grade\" \"\" \"\" 225386 CSV GradeReport.bat \"Student grade\" \"07/16/2021\" \"\" \"\" CSV" | multikv noheader=t | fields _raw | fields - _time | rex "(?<batfile>\S+)\s+\"(?<grade>[^\"]+)\"\s+\"(?<start>[^\"]*)\"\s+\"(?<end>[^\"]*)\"\s\"?(?<number>\d*)\"?\s+(?<format>.*)" | foreach * [| eval <<FIELD>>=if(<<FIELD>>="",null(),<<FIELD>>)] | stats count(grade) as first_count count(start) as second_count count(end) as third_count count(number) as fourth_count count as grade_count by grade | eval {grade}=grade_count | fields - grade grade_count | stats sum(*) as * ... View more